$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/QxiMsfh6VEm00wX-_IMbf-XRxkM.roa File: QxiMsfh6VEm00wX-_IMbf-XRxkM.roa (raw, json) Hash identifier: 61BTlDr+szzAIIwdU7Y6/ZMLE2/YvV0W3s+RH0Ojx4g= Subject key identifier: 43:18:8C:B1:F8:7A:54:49:B4:D3:05:FE:FC:83:1B:7F:E5:D1:C6:43 Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Certificate serial: 0BA1 Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/QxiMsfh6VEm00wX-_IMbf-XRxkM.roa Signing time: Fri 01 Sep 2023 10:01:07 +0000 ROA not before: Fri 01 Sep 2023 10:01:07 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18049 IP address blocks: 61.67.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2977 (0xba1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Validity Not Before: Sep 1 10:01:07 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=43188CB1F87A5449B4D305FEFC831B7FE5D1C643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:be:34:f9:1d:7c:2d:e8:f1:d0:a4:05:d6:37: ee:5f:1c:1b:3f:8c:0f:f1:9c:b5:77:5a:55:fc:f1: 4e:26:1e:4e:7e:d5:5e:fe:76:1b:ed:94:62:5f:17: e6:33:21:78:23:3c:bd:a0:b6:2b:87:43:41:af:e2: 9d:75:ea:b8:b3:91:71:ce:68:b4:75:fa:7e:54:c0: ee:af:2b:43:8d:b2:03:c6:93:5c:90:03:a7:86:49: b5:15:23:79:cf:30:b0:ea:0d:2a:6b:69:d8:93:89: f7:29:39:ef:68:c1:ed:9b:7b:96:4e:1c:ad:c5:d0: 29:25:01:76:bc:c4:31:d6:55:99:64:41:94:09:cf: b8:bf:e8:57:c4:65:ee:c0:c9:9f:76:65:66:b3:b7: f5:80:6c:d1:50:8b:c9:78:03:0d:c6:fa:1c:fd:1c: 74:dd:47:72:6a:7f:d3:3e:27:36:96:f7:10:64:3c: 38:2e:54:45:33:a5:22:28:e8:25:6b:dd:ff:59:45: 48:0e:e0:24:2b:a3:46:73:9e:12:e6:2d:79:b7:8b: fb:ef:d2:0d:7d:b7:71:3b:58:b7:53:1a:59:06:db: 25:28:d8:d7:97:d5:46:39:45:45:7c:d2:ce:08:07: 25:2d:a7:c5:f3:2e:a5:c5:81:b8:36:92:91:1b:5a: 22:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:18:8C:B1:F8:7A:54:49:B4:D3:05:FE:FC:83:1B:7F:E5:D1:C6:43 X509v3 Authority Key Identifier: keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/QxiMsfh6VEm00wX-_IMbf-XRxkM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.67.16.0/20 Signature Algorithm: sha256WithRSAEncryption 45:fb:02:72:2c:53:00:05:f1:01:39:02:0c:84:5d:30:d5:d9: f4:a6:4d:9d:a9:21:b4:e9:97:b7:13:7a:23:92:5f:c8:0c:7d: 59:3e:22:ef:71:9b:95:89:4e:c0:f4:fd:fd:a3:07:60:31:47: 8a:1b:7b:f7:3e:d7:f2:7c:b2:38:5d:40:ff:68:c3:46:62:d2: 96:77:a8:4e:b7:1a:2a:96:c3:22:5a:a2:e3:8c:3e:12:63:53: df:20:5e:6e:f5:a6:38:15:cf:19:fb:ed:b8:47:f4:a8:e3:f0: 6f:78:00:d1:91:35:d6:dd:77:6c:ab:ad:42:ac:97:91:08:d7: 51:61:e5:91:66:b6:32:2d:62:c5:85:76:49:a0:10:6d:d0:be: 64:d0:36:e9:bb:c2:09:f1:34:59:e6:de:0c:53:49:95:df:d1: 34:7b:72:81:13:1c:8e:8d:0b:95:cf:ef:08:1f:91:64:34:58: ed:5b:02:74:9e:25:f2:aa:90:6b:64:c2:02:e8:b2:a1:dc:d1: 0e:b5:06:b2:81:98:eb:d4:d8:cf:d5:7e:6e:38:9e:ee:48:a9: 25:37:1b:9d:ad:71:c4:c1:43:44:0d:6c:db:74:cb:24:ce:19: d0:ce:bd:5b:44:37:7e:39:c7:e4:de:f2:a7:21:d9:bc:ff:80: 00:f5:62:35 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICC6EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yMzA5MDEx MDAxMDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQzMTg4Q0IxRjg3QTU0 NDlCNEQzMDVGRUZDODMxQjdGRTVEMUM2NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClvjT5HXwt6PHQpAXWN+5fHBs/jA/xnLV3WlX88U4mHk5+1V7+ dhvtlGJfF+YzIXgjPL2gtiuHQ0Gv4p116rizkXHOaLR1+n5UwO6vK0ONsgPGk1yQ A6eGSbUVI3nPMLDqDSpradiTifcpOe9owe2be5ZOHK3F0CklAXa8xDHWVZlkQZQJ z7i/6FfEZe7AyZ92ZWazt/WAbNFQi8l4Aw3G+hz9HHTdR3Jqf9M+JzaW9xBkPDgu VEUzpSIo6CVr3f9ZRUgO4CQro0ZznhLmLXm3i/vv0g19t3E7WLdTGlkG2yUo2NeX 1UY5RUV80s4IByUtp8XzLqXFgbg2kpEbWiIbAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUQxiMsfh6VEm00wX+/IMbf+XRxkMwHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80 Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvUXhpTXNmaDZWRW0wMHdYLV9JTWJm LVhSeGtNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD1DEDAN BgkqhkiG9w0BAQsFAAOCAQEARfsCcixTAAXxATkCDIRdMNXZ9KZNnakhtOmXtxN6 I5JfyAx9WT4i73GblYlOwPT9/aMHYDFHiht79z7X8nyyOF1A/2jDRmLSlneoTrca KpbDIlqi44w+EmNT3yBebvWmOBXPGfvtuEf0qOPwb3gA0ZE11t13bKutQqyXkQjX UWHlkWa2Mi1ixYV2SaAQbdC+ZNA26bvCCfE0WebeDFNJld/RNHtygRMcjo0Llc/v CB+RZDRY7VsCdJ4l8qqQa2TCAuiyodzRDrUGsoGY69TYz9V+bjie7kipJTcbna1x xMFDRA1s23TLJM4Z0M69W0Q3fjnH5N7ypyHZvP+AAPViNQ== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:53 2024 by rpki-client on console-ams.rpki-client.org